Michael Dillon asks, yet again:
> Ssorry if this is a repeat, but we haven't seen a single
> response yet from the first posting on Tuesday. Thinking
> the first posting may not have actually made it, we
> decided to try again.
> ============================================================
>
> To the collective guruhood:
>
> SMIT generated the following error message in response to
> our attempted install of the ADSM AIX client code via the
> SMIT "custom install of selectable software" on AIX 4.1.
>
> A copy of the input install screen follows the error....
>
>
>
> ADSM ver 1.2.0.0
> ---------------------------------------------------------------------
> 3001-101 The Trusted Computing Base is not enabled on this machine.
> To enable the Trusted Computing Base, you must reinstall and
> set the 'Install Trusted Computing Base' option to YES.
> No checking is being performed.
>
> ---------------------------------------------------------------------
> Install Software Products at Latest Level
>
> Type or select values in entry fields.
> Press Enter AFTER making all desired changes.
>
> Entry Fields!
> * INPUT device / directory for software /usr/sys/inst.images
> * SOFTWARE to install 1.2.0.0 adsm
> >
> PREVIEW only? (install operation will NOT occur) no
>
> COMMIT software updates? yes
>
> SAVE replaced files? no
>
> ALTERNATE save directory !
> AUTOMATICALLY install requisite software? no
>
> EXTEND file systems if space needed? yes
>
> OVERWRITE same or newer versions? no
>
> VERIFY install and check file sizes? no
>
> Include corresponding LANGUAGE filesets? yes
>
> DETAILED output? no
>
>
>
> --------------------------------------------------------------
>
> Can anyone tell us why ADSM/SMIT requires the Trusted Computing
> Base? Is there any known work-around that will enable us
> to complete the ADSM client install WITHOUT re-installing
> AIX with the TCB option? (We would RTFM if we could find it.)
> You're dealing with an AIX weakling here, so please
> gauge your responses accordingly.
Michael, I'm probably a bigger AIX weakling than you, which is why I didn't
respond the first time. But I'll take a crack at answering your question.
ADSM comes with a component called a Trusted Communication Agent (or
something like that). I'm at home now, and don't have UNIX at hand, but
the file is called something like "dsmtca", "adsmtca", or "dsmctca". Anyway,
it ends in "tca". I think this agent allows non-root users to invoke certain
system-level functions for the purposes of using ADSM. Someone once described
it to me as being similar to the linklist in MVS, but this may not be
entirely accurate.
Anyway, my guess is that you will have to install the Trusted Computing Base.
As I said, AIX isn't my specialty, either, so please take this with a grain
of salt. But I suspect there is a relationship between the Trusted Computing
Base and the Trusted Communication Agent of ADSM.
Andy Raibeck
Connecticut Mutual
203-987-3521
|
